Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa
File:                     87f65451-ec52-3ff0-acfa-d69d59382d24.roa (raw, json)
Hash identifier:          dUWsrFQGk9ZDW3pjkAnxCTlZq4DQ8EYmDi3g2Kic34M=
Subject key identifier:   EC:74:21:46:18:6A:38:51:32:8E:AD:9E:72:DA:0E:BD:6F:EC:09:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7959DAAFAF4EDDC236DDF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396593
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:9d:aa:fa:f4:ed:dc:23:6d:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebd0b8a3-0041-4fa9-bc58-521dfd668439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:a6:97:51:61:f0:98:f9:2b:f3:50:11:08:
                    ea:39:76:93:12:01:b5:7f:7f:25:45:87:46:f9:28:
                    2e:3f:bf:da:fc:b6:a9:c1:9a:7f:4a:1b:ea:df:31:
                    ff:52:cf:41:d3:68:87:d1:0a:c5:ef:f3:68:eb:af:
                    66:6e:1c:99:5d:38:d3:5f:c2:22:4d:28:33:60:5c:
                    32:90:d8:9e:08:3b:2e:78:95:71:54:0e:cd:ff:2b:
                    97:82:d1:f2:45:1c:11:2b:6c:67:4f:71:cf:38:5a:
                    42:8d:c6:13:6b:ff:d2:33:3a:f4:e6:ed:3b:7a:14:
                    05:69:94:11:a4:ee:c4:29:d6:d7:04:16:d0:0b:f6:
                    64:f8:f6:7d:4f:cf:c3:18:35:5d:ca:41:3e:98:52:
                    c3:77:25:0a:83:61:08:16:3f:73:9b:c2:a7:d2:6c:
                    ee:25:da:f8:f8:fc:c1:6d:58:0f:fe:1f:88:c6:bc:
                    89:54:e4:c7:37:28:2d:fb:07:69:20:27:cf:7e:23:
                    60:3b:d7:36:eb:05:24:bf:7b:17:5a:f9:e4:27:aa:
                    67:7a:ef:28:ba:05:1c:d7:1f:cd:a0:ca:ee:de:9c:
                    15:e6:fa:b2:26:4e:6b:c8:f4:e4:b7:29:19:3c:27:
                    7a:7f:c9:46:96:da:6e:5a:31:22:7f:46:6e:c2:23:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:74:21:46:18:6A:38:51:32:8E:AD:9E:72:DA:0E:BD:6F:EC:09:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:dc:e6:7e:72:b7:82:2a:f2:e8:4c:11:b7:00:4f:3b:63:
         35:36:c2:c0:60:04:61:12:84:ca:8a:47:6b:4a:97:4e:05:d1:
         8c:b0:90:1c:20:f4:26:7c:4b:55:17:38:ec:4f:ff:c9:fd:3c:
         7d:3c:74:68:dc:36:e3:53:a0:65:d2:94:c3:3b:5b:a5:b4:a5:
         ea:13:c8:cf:55:6b:dc:e5:c9:a6:b4:16:a6:b6:85:23:62:81:
         fd:76:d6:cb:b0:01:73:13:a9:b2:f5:94:7a:8b:4d:d8:30:c1:
         7e:7f:0a:6a:24:da:88:69:ee:21:39:69:be:b3:ff:b3:24:22:
         0c:3a:6f:d6:b3:5f:ec:d8:8d:3f:cd:40:04:a4:7f:6d:24:a9:
         42:e9:53:43:76:95:35:d8:23:d4:d1:03:1d:28:b6:8c:b7:02:
         94:03:67:55:24:72:a1:db:a2:e4:f5:d1:72:c4:a3:62:9c:6c:
         ec:a9:c1:3e:5a:80:57:7e:61:ce:e2:f9:9e:77:e5:d4:97:56:
         95:55:37:aa:45:dd:eb:eb:ef:6a:21:b4:5c:e0:8f:fc:84:37:
         5a:e1:90:f1:55:84:82:98:5d:01:4b:57:17:b5:8d:b9:94:88:
         10:10:7a:25:e0:ca:78:ec:5a:81:99:8f:1e:89:70:30:83:da:
         24:9b:0e:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlZ2q+vTt3CNt3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWJkMGI4YTMtMDA0MS00ZmE5LWJjNTgtNTIxZGZkNjY4NDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTiml1Fh8Jj5K/NQEQjqOXaTEgG1f38lRYdG
+SguP7/a/LapwZp/Shvq3zH/Us9B02iH0QrF7/No669mbhyZXTjTX8IiTSgzYFwy
kNieCDsueJVxVA7N/yuXgtHyRRwRK2xnT3HPOFpCjcYTa//SMzr05u07ehQFaZQR
pO7EKdbXBBbQC/Zk+PZ9T8/DGDVdykE+mFLDdyUKg2EIFj9zm8Kn0mzuJdr4+PzB
bVgP/h+IxryJVOTHNygt+wdpICfPfiNgO9c26wUkv3sXWvnkJ6pneu8ougUc1x/N
oMru3pwV5vqyJk5ryPTktykZPCd6f8lGltpuWjEif0ZuwiPhPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOx0IUYYajhRMo6tnnLaDr1v7AkzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdmNjU0NTEtZWM1Mi0z
ZmYwLWFjZmEtZDY5ZDU5MzgyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5E3OZ+creCKvLoTBG3AE87YzU2wsBgBGEShMqKR2tKl04F0YywkBwg
9CZ8S1UXOOxP/8n9PH08dGjcNuNToGXSlMM7W6W0peoTyM9Va9zlyaa0Fqa2hSNi
gf121suwAXMTqbL1lHqLTdgwwX5/Cmok2ohp7iE5ab6z/7MkIgw6b9azX+zYjT/N
QASkf20kqULpU0N2lTXYI9TRAx0otoy3ApQDZ1UkcqHbouT10XLEo2KcbOypwT5a
gFd+Yc7i+Z535dSXVpVVN6pF3evr72ohtFzgj/yEN1rhkPFVhIKYXQFLVxe1jbmU
iBAQeiXgynjsWoGZjx6JcDCD2iSbDh8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:14 2026 by rpki-client